CBSE - Certified Blockchain Security Expert Enterprise Blockchain Security Questions and Answers

Question 1

In a Hyperledger Fabric network, which component is primarily responsible for issuing and validating identities and defining the roles of participating members?

Accepted Answer

The Membership Service Provider (MSP)

Answer

The Membership Service Provider (MSP) is the core identity management component in Hyperledger Fabric. It is responsible for mapping cryptographic identities, like X.509 certificates, to roles and permissions within the network, thereby managing which participants are trusted and what actions they are authorized to perform.

Question 2

An enterprise consortium is building a supply chain solution on Hyperledger Fabric. They need to ensure that transactions related to pricing negotiations between a supplier and a retailer are kept confidential and are not visible to other members of the consortium, like logistics providers. Which Hyperledger Fabric feature is specifically designed to address this requirement for data isolation?

Accepted Answer

Channels

Answer

Channels in Hyperledger Fabric create a private 'subnet' of communication between two or more specific network members. Each channel has its own separate ledger, meaning that only the members of that channel can see and transact on it, providing a powerful mechanism for confidentiality among subsets of participants.

Question 3

For a large-scale enterprise blockchain solution, what is considered the most secure industry-standard method for managing the private keys of critical identities, such as Certificate Authorities or Orderer nodes, to protect them from both software and physical threats?

Accepted Answer

Storing keys within a Hardware Security Module (HSM).

Answer

A Hardware Security Module (HSM) is a dedicated, tamper-resistant physical device designed for the secure management and storage of cryptographic keys. It ensures that private keys never leave the secure hardware boundary, offering the highest level of protection against both software-based attacks and physical tampering.

Question 4

Which of the following best describes the primary security function of an endorsement policy in Hyperledger Fabric?

Accepted Answer

To define the set of organizations that must execute and approve a transaction before it can be considered valid.

Answer

An endorsement policy is a critical governance and security mechanism in Hyperledger Fabric. It is specified for a chaincode and dictates which peers (representing their organizations) must simulate and sign a transaction proposal. A transaction can only be committed to the ledger if it has collected the required set of signatures according to this policy, preventing unilateral actions and ensuring consensus among required parties.

Question 5

An enterprise wants to build a blockchain system to verify academic credentials. A university needs to issue a credential, and an employer needs to verify that a candidate has a valid degree without seeing the student's specific grades or other private details. Which cryptographic technique is best suited for this privacy-preserving verification?

Accepted Answer

Zero-Knowledge Proofs (ZKPs)

Answer

Zero-Knowledge Proofs (ZKPs) allow one party (the prover) to prove to another party (the verifier) that a statement is true, without revealing any information beyond the validity of the statement itself. This is ideal for credential verification, as the student (prover) can prove they have a valid degree to the employer (verifier) without disclosing the underlying private data like grades.

(CBSE) Certified Blockchain Security Expert Practice Test

(CBSE) Certified Blockchain Security Expert Practice Test

CBSE - Certified Blockchain Security Expert Enterprise Blockchain Security Questions and Answers